home

bcmgr.exe

交通银行网上银行

Feitian Technologies Co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘BC_MGR_07’.
Publisher:
Feitian Technologies Co., Ltd.  (signed and verified)

Product:
交通银行网上银行

Description:
交通银行网上银行07型USBKey管理工具

Version:
1, 0, 10, 1027

MD5:
6c33f512634040a178c1d5b0353e9100

SHA-1:
822ae564f178f057738edebd2ce54b3f47d5a13f

SHA-256:
e4bbe1535b60311979021f512fb4c20c2ea67f9f1067b1adc27a6f4e3b89ac1d

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
5/11/2025 3:32:04 PM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Suspicious
8917

Norman
W32/Malware.QTMW
11.20140114

File size:
261.4 KB (267,640 bytes)

Product version:
1, 0, 10, 1027

Copyright:
Copyright (C) 2006

Original file name:
bcmgr.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\bocom\07usbkey\bcmgr.exe

Digital Signature
Signed by:
Feitian Technologies Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
5/15/2010 9:00:00 AM

Valid to:
6/2/2013 8:59:59 AM

Subject:
CN="Feitian Technologies Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Feitian Technologies Co., Ltd.", L="Beijing,China", S="Beijing,China", C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2DB7D07D6233552F85E5690E446B1C2C

File PE Metadata
Compilation timestamp:
10/27/2010 3:20:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:Oi/9lqBO8ZuZn5U9nRXOpXeeeeeeeeeeeeeeeeeeetvs9E7b9+QCnVvvx2314W:L/BJZ5U9nRdCE/9Bqvx2GW

Entry address:
0xDAAC

Entry point:
55, 8B, EC, 6A, FF, 68, 18, 16, 41, 00, 68, 16, DC, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 6C, 04, 41, 00, 59, 83, 0D, 2C, 58, 41, 00, FF, 83, 0D, 30, 58, 41, 00, FF, FF, 15, 70, 04, 41, 00, 8B, 0D, 20, 58, 41, 00, 89, 08, FF, 15, 74, 04, 41, 00, 8B, 0D, 1C, 58, 41, 00, 89, 08, A1, 78, 04, 41, 00, 8B, 00, A3, 28, 58, 41, 00, E8, 28, 01, 00, 00, 39, 1D, E8, 56, 41, 00, 75, 0C, 68, 40, DC, 40, 00, FF, 15, 7C, 04...
 
[+]

Entropy:
5.2887

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
60 KB (61,440 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
BC_MGR_07

Command:
"C:\Program Files\bocom\07usbkey\bcmgr.exe" -r


Scan bcmgr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.